Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/964b6088-85a6-4363-a11f-20d725bba3f7/a5404b561a2c18bcc3e7457830549acbb899a455.roa
File:                     a5404b561a2c18bcc3e7457830549acbb899a455.roa (raw, json)
Hash identifier:          PRTx5zJo3e6R4FbjSasRBxRU3bToOcuAJbD8QfziRHg=
Subject key identifier:   2C:B0:08:9A:F9:BC:72:44:DE:D9:C7:29:4A:17:91:FA:C4:29:1D:74
Certificate issuer:       /CN=d5f5b360f6396f35cac76fe7727148af2ea950d9
Certificate serial:       0EBEB1
Authority key identifier: 38:66:D1:54:E1:04:2B:B2:C3:11:22:39:6A:CB:0D:60:F0:7A:DD:C9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d5f5b360f6396f35cac76fe7727148af2ea950d9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/964b6088-85a6-4363-a11f-20d725bba3f7/a5404b561a2c18bcc3e7457830549acbb899a455.roa
Signing time:             Wed 24 Mar 2021 14:29:31 +0000
ROA not before:           Wed 24 Mar 2021 14:29:26 +0000
ROA not after:            Tue 24 Mar 2026 14:29:26 +0000
asID:                     52323
IP address blocks:        2800:600:180::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 966321 (0xebeb1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d5f5b360f6396f35cac76fe7727148af2ea950d9
        Validity
            Not Before: Mar 24 14:29:26 2021 GMT
            Not After : Mar 24 14:29:26 2026 GMT
        Subject: CN=a5404b561a2c18bcc3e7457830549acbb899a455
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:bd:91:31:b3:f7:0f:c5:ae:d0:21:f8:99:07:
                    b0:f9:9e:3f:5e:d2:bb:2e:4e:4c:40:12:5c:d5:0c:
                    41:21:04:d1:16:cc:1a:02:9e:e6:47:2e:f9:a7:d2:
                    82:e8:e0:02:a4:26:cc:db:a8:5b:a4:7a:10:33:86:
                    0c:b0:39:f2:5c:6c:17:b9:33:6e:ba:1a:e3:3e:f7:
                    63:91:6f:72:66:2e:80:32:4a:70:74:0d:b2:7a:63:
                    af:c7:64:9e:6c:12:be:92:a7:b7:d6:0b:0c:d6:40:
                    94:5f:e4:72:83:7a:81:37:68:e5:24:b2:6e:62:17:
                    d2:8b:7d:8f:0d:57:fb:b8:d2:e1:b2:f5:52:b7:a6:
                    87:61:8e:ee:f4:b7:07:44:86:7a:3c:1b:66:03:43:
                    9a:06:b8:1b:0d:4e:fa:98:07:00:74:e4:4f:76:38:
                    8d:08:26:a2:9a:1a:36:7c:75:11:f9:c2:33:e5:54:
                    bf:4e:2a:1a:01:63:3e:47:16:03:70:df:d9:97:9d:
                    b5:2d:f5:5d:93:97:15:0f:88:28:a6:e1:98:13:26:
                    fc:1d:c4:c4:62:dc:76:64:5e:e2:2c:46:1d:84:f7:
                    3f:69:80:7e:03:0d:41:81:55:a0:d1:b9:cd:86:a8:
                    82:2d:38:a2:7c:ed:b5:bc:87:b3:5b:8c:f3:a6:c0:
                    b8:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:B0:08:9A:F9:BC:72:44:DE:D9:C7:29:4A:17:91:FA:C4:29:1D:74
            X509v3 Authority Key Identifier:
                keyid:38:66:D1:54:E1:04:2B:B2:C3:11:22:39:6A:CB:0D:60:F0:7A:DD:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d5f5b360f6396f35cac76fe7727148af2ea950d9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/964b6088-85a6-4363-a11f-20d725bba3f7/a5404b561a2c18bcc3e7457830549acbb899a455.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/964b6088-85a6-4363-a11f-20d725bba3f7/d5f5b360f6396f35cac76fe7727148af2ea950d9.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2800:600:180::/48

    Signature Algorithm: sha256WithRSAEncryption
         57:1d:d9:b0:2e:2f:c4:43:4a:0a:2b:d2:91:89:6a:8f:34:10:
         a5:08:62:2f:f3:a5:b2:a7:bf:50:34:f3:c9:64:f2:68:25:ff:
         f2:d5:b1:6e:a1:88:ff:86:c9:61:06:99:2d:92:56:10:18:ba:
         53:d9:6c:fa:1f:58:da:75:17:47:26:b6:1d:43:98:d5:0e:a7:
         f0:51:64:e7:ab:73:76:12:25:bd:5e:aa:03:22:44:64:e1:01:
         31:49:56:d3:f9:df:a1:af:b0:1a:98:85:ad:02:89:f4:2c:6e:
         00:3b:fd:0f:88:ec:63:e5:9e:b5:1a:50:25:fb:69:ce:96:dd:
         bf:f7:3b:c3:a7:fb:c1:bd:03:63:47:6e:6d:cc:c8:f3:23:ec:
         88:57:b7:c0:90:83:fe:ff:dd:a1:63:c5:9e:7b:0d:e2:fe:1d:
         88:a6:86:16:1b:35:77:d2:26:9f:74:4d:c5:70:43:12:ee:68:
         56:c2:56:81:9b:1d:27:dc:7f:34:8a:df:b3:ea:63:24:83:53:
         d3:ba:f3:c2:f9:11:5d:3e:c7:4a:48:2c:85:92:aa:94:33:82:
         be:04:69:cb:b4:b7:e3:e7:44:59:e3:e5:27:bf:0e:fc:34:a2:
         24:8c:57:ce:ab:d9:d2:ae:f4:48:27:68:a8:d1:e9:50:11:21:
         66:e1:9f:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----